POC: Abstration policies

[guicassolato]

Prove the concept of new kinds of policies of abstractions on top of existing Kuadrant policies.

E.g.:

• Global RL Policy / Local RL Policy ⇨ RateLimitPolicy + counter qualifiers
• Authenticated RL Policy ⇨ AuthPolicy + RateLimitPolicy
• JWT Authentication Policy ⇨ AuthPolicy
• API Key Authentication Policy ⇨ AuthPolicy
• Other use cases for auth list at https://docs.kuadrant.io/kuadrant-operator/doc/user-guides/auth-for-app-devs-and-platform-engineers/

TBD. Architectures / technologies

• 1 policy == 1 controller vs. 1 policy controller monolith
• Metacontroller (?)
• Something based on Kuadrant/gateway-api-machinery (?)